CVE-2019-8351

—

CVSS 3.0

9.1 critical

EPSS

1%p69

Published

Mar 21, 2019 (Mar 21, 2019)

Modified

Jun 17, 2026

Description

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

Vendors: heimdalsecurity
Products: thor
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.